Security

Built for companies that keep their plans private.

Your data stays yours

Each company's data is separated at every layer: every request is checked against the signed-in person's membership, every database query is scoped to their company, and the database itself rejects links between companies. Automated tests try to reach other companies' data through every part of the application on every change.

Stored in the EU

StyleFlow runs on Cloudflare. Your production data and files are stored in Cloudflare's EU jurisdiction.

No passwords to leak

People sign in with a one-time code sent to their work email. Only people your administrators invite can sign in. Deactivating someone removes their access immediately.

Access you control

Permission roles — admin, manager, member, viewer — decide what people can see and change. Job titles are kept separate, so naming someone 'Production Manager' never grants access by accident. You can limit members to the styles they work on.

Private files

Images and attachments are private, checked by their content when uploaded, and only ever delivered to signed-in people with access to the style.

A record of what happened

Changes to styles, milestones, people and settings are logged with who made them and when. StyleFlow's own administrators have no access to your production data, and their actions are logged too.

Backups

The database can be restored to any point in the last 30 days.

Questions from your IT team? Write to hello@style-flow.app.